<br>
1. Introduction


worthli.ai is a trading name of Rylian AI Ltd, a company registered in England and Wales (“Worthli”, “we”, “us” or “our”).


We are committed to protecting your privacy and handling your personal information responsibly and securely.


This Privacy Policy explains how we collect, use, store and protect your personal information when you visit [www.worthli.ai](http://www.worthli.ai), create an account, purchase a business valuation or M&A readiness assessment, connect a third-party service such as Xero, or otherwise use our services.


We process personal information in accordance with applicable UK data protection laws, including the UK General Data Protection Regulation (“UK GDPR”) and the Data Protection Act 2018.


2. Information We Collect


We may collect and process the following categories of information:


**Account and contact information**


* Name
* Email address
* Company or business name
* Account login and authentication information
* Communications you send to us


**Business and financial information**


* Business revenue and profitability information
* EBITDA and other financial metrics
* Balance sheet information
* Cash flow information
* Assets and liabilities
* Historical financial information
* Business sector and company information
* Information provided as part of a business valuation or M&A readiness assessment


Much of this information relates to a business rather than an identifiable individual and may therefore not constitute personal data. Where information can identify an individual, we treat it as personal data in accordance with this Privacy Policy.


**Payment information**


Payments for Worthli services are processed by third-party payment providers such as Stripe. We do not store complete credit or debit card details on our systems.


We may retain transaction information such as the amount paid, payment status, date of payment and associated account or customer identifiers for accounting, support and compliance purposes.


**Technical and usage information**


When you use our website or services, we may automatically collect technical information including:


* IP address
* Browser type and version
* Device type
* Operating system
* Pages visited
* Login and activity information
* Referral information
* Diagnostic, security and error logs


This information may be collected through cookies and similar technologies.


3. Xero and Third-Party Integrations


If you choose to connect your Xero account to Worthli, you authorise us to access information from your Xero account for the purpose of providing our valuation and related services.


Depending on the services you use, this may include:


* Revenue and profit information
* Balance sheet information
* Cash flow information
* Historical financial data
* Other accounting information required to perform your valuation or assessment


Worthli uses secure OAuth authentication when connecting to Xero. We do not receive or store your Xero password.


We only request access to information that is reasonably necessary to provide the relevant Worthli functionality.


You may disconnect your Xero integration at any time. Disconnecting the integration prevents future access to your Xero account but does not necessarily delete information that has already been imported into Worthli. You may request deletion of eligible information by contacting us.


Where we introduce integrations with other accounting or business platforms, information obtained through those integrations will be handled in accordance with this Privacy Policy.


4. How We Use Your Information


We may use the information we collect to:


* Create and manage your Worthli account
* Provide business valuations and M&A readiness assessments
* Generate reports, financial models, projections and strategic insights
* Import financial information from services you choose to connect
* Process and administer purchases
* Communicate with you about your account or reports
* Respond to support requests
* Maintain and improve the Worthli service
* Develop and improve our valuation methodologies and software
* Monitor the performance, reliability and security of our systems
* Prevent fraud, misuse and unauthorised access
* Comply with our legal and regulatory obligations
* Establish, exercise or defend legal claims
* Send service-related communications
* Send marketing communications where permitted by law


We do not sell your personal information.


5. Lawful Basis for Processing


Under UK data protection law, we must have a lawful basis for processing personal information.


Depending on the circumstances, we rely on the following lawful bases:


**Contract** – where processing is necessary to provide the Worthli service you have requested, including creating your account, processing your valuation and delivering your report.


**Legitimate interests** – where processing is necessary for our legitimate business interests, including maintaining and improving the service, protecting our systems, preventing fraud, providing customer support and understanding how our services are used, provided those interests are not overridden by your rights and interests.


**Legal obligation** – where we are required to process or retain information to comply with applicable laws, accounting requirements, regulatory obligations or lawful requests.


**Consent** – where we specifically ask for your consent, including for certain cookies or marketing activities where consent is required. You may withdraw your consent at any time.


6. AI and Automated Processing


Worthli uses software and artificial intelligence to analyse business and financial information and assist in producing business valuations, financial projections, M&A readiness assessments and strategic insights.


The information you provide may therefore be processed automatically as part of generating your Worthli report.


Worthli’s valuations and assessments are provided for informational and advisory purposes. They are not decisions about an individual and are not intended to produce legal or similarly significant effects on individuals.


You should not rely solely on an automated valuation or assessment when making significant financial, investment, legal or business decisions.


7. Sharing Your Information


We may share information with trusted third-party service providers where necessary to operate Worthli.


These may include providers of:


* Cloud hosting and infrastructure
* Payment processing
* Accounting integrations
* Authentication and account management
* Email and communications
* Website analytics
* Security and fraud prevention
* Customer support
* Artificial intelligence and data processing services


These providers are permitted to process information only as necessary to provide services to us and subject to appropriate contractual and data protection requirements.


We may also disclose information where required by law, regulation, court order or a lawful request from a public authority.


If Rylian AI Ltd or the Worthli business is involved in a merger, acquisition, financing, restructuring or sale of all or part of its business or assets, information may be disclosed to relevant professional advisers and prospective purchasers or investors subject to appropriate confidentiality arrangements.


We do not sell your personal information or financial information to third parties.


8. Business and Financial Data


We recognise that the financial information submitted to Worthli may be commercially sensitive.


We use this information for the purpose of providing and operating the Worthli service and for legitimate activities required to maintain, secure and improve the service.


We do not disclose your identifiable business financial information to other Worthli customers.


Where information is used for analytics, benchmarking or service improvement, we may aggregate or anonymise information so that it no longer identifies you or your business.


9. Data Security


We take appropriate technical and organisational measures to protect information against unauthorised access, loss, misuse, alteration or disclosure.


These measures include encryption of data in transit and encryption of stored data where appropriate, secure authentication mechanisms, access controls and monitoring designed to protect our systems.


Connections to supported third-party services such as Xero use secure authentication mechanisms such as OAuth, meaning Worthli does not need to store your password for those services.


However, no internet-based service or electronic storage system can be guaranteed to be completely secure.


10. Data Retention


We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including providing the Worthli service and satisfying legal, accounting, security and regulatory requirements.


Account information and information associated with completed valuations may be retained while your account remains active and for a reasonable period afterwards.


Financial and transaction records may be retained for longer where required for tax, accounting or legal purposes.

Security and technical logs may be retained for a reasonable period to protect our systems and investigate security incidents.


Where information is no longer required, we will delete or anonymise it in accordance with our data retention practices.


You may request deletion of your personal information by contacting us at hello@worthli.ai, subject to any information we are required or permitted to retain by law.


11. International Data Transfers


Some of the service providers we use may process information outside the United Kingdom.


Where personal information is transferred internationally, we take appropriate steps to ensure that the transfer complies with applicable UK data protection law.


Depending on the destination and provider, this may include relying on UK adequacy regulations or implementing appropriate contractual safeguards for international transfers.


You may contact us if you would like further information about the safeguards used for international transfers of your personal information.


12. Cookies and Analytics


Worthli may use cookies and similar technologies to operate the website and service, maintain sessions, remember preferences, understand how the service is used, improve performance and protect against fraud and security threats.


Some cookies are essential for the website and service to function.


Where required by law, non-essential cookies will only be used with your consent.


You can control cookies through your browser settings and, where available, through the cookie controls provided on our website.


Disabling certain cookies may affect the functionality of the Worthli service.


13. Marketing Communications


We may send you information relating to Worthli products, services and features where permitted by law.


Where consent is required, we will only send marketing communications where you have provided that consent.


You can unsubscribe from marketing emails at any time using the unsubscribe link included in the communication or by contacting us at [hello@worthli.ai](mailto:hello@worthli.ai).


You may still receive essential service communications relating to your account, purchases, security or reports.


14. Your Data Protection Rights


Depending on the circumstances and applicable law, you may have the right to:


* Request access to the personal information we hold about you
* Request correction of inaccurate or incomplete information
* Request deletion of your personal information
* Request restriction of processing
* Object to certain processing
* Request transfer of certain information to you or another provider
* Withdraw consent where processing is based on consent
* Object to direct marketing


These rights are not absolute and may be subject to exemptions under applicable law.


To exercise any of these rights, please contact us at [hello@worthli.ai](mailto:hello@worthli.ai).


We may need to verify your identity before completing your request.


15. Your Right to Object


**You have the right to object to processing of your personal information where we rely on legitimate interests as our lawful basis.**


**You also have the right to object at any time to the use of your personal information for direct marketing purposes.**


To exercise this right, contact us at [hello@worthli.ai](mailto:hello@worthli.ai).


16. Children’s Privacy


Worthli is a business service and is not intended for use by children.


We do not knowingly collect personal information from children through the Worthli service.


If you believe that a child has provided personal information to us, please contact us so that we can investigate and take appropriate action.


17. Third-Party Websites and Services


Worthli may contain links to or integrate with third-party websites and services.


Those third parties operate under their own privacy policies and terms. We are not responsible for the privacy practices of third-party websites or services that we do not control.


We recommend reviewing the relevant privacy policies before providing personal information to a third-party service.


18. Data Breaches


We maintain processes designed to identify, investigate and respond to suspected personal data breaches.

Where a personal data breach is likely to result in a risk to individuals’ rights and freedoms, we will notify the relevant supervisory authority where required by law.

Where a breach is likely to result in a high risk to an affected individual, we will also notify that individual where required by applicable law.


19. Complaints


If you have concerns about how we use your personal information, please contact us first at [hello@worthli.ai](mailto:hello@worthli.ai) so that we can investigate your concern.


You also have the right to make a complaint to the Information Commissioner’s Office (ICO), the UK’s independent data protection regulator.


Information about making a complaint is available from the ICO.


20. Changes to This Privacy Policy


We may update this Privacy Policy from time to time to reflect changes to our services, technology, legal requirements or business practices.


Any changes will be published on this page and the “Last modified” date will be updated.


Where changes materially affect how we use your personal information, we will take reasonable steps to bring those changes to your attention where required by law.


21. Contact Information


worthli.ai is a trading name of Rylian AI Ltd, a company registered in England and Wales.


If you have any questions about this Privacy Policy, how we process your personal information, or if you wish to exercise your data protection rights, please contact us at:

hello@worthli.ai


By using Worthli, you acknowledge that you have read this Privacy Policy and understand how your information is collected and used.